1 2 Previous Next 17 Replies Latest reply on Dec 14, 2017 9:36 AM by SYED REHMAN Branched to a new discussion.

    Workbooks that a group has access to

    Arun Yadav

      Hi All,

       

      I was trying to customize the admin views.

      I want to build a view which can tell me that a given user group has access to which workbooks/projects.

       

      Has anyone designed a similar view.Any help in this regard will be highly appreciated.

       

      Regards,

      Arun

        • 1. Re: Custom Admin Views
          jegan.sivaraj

          Arun,

           

          I have been searching for an answer for this too. There is a custom sql on github that gets this data. I found it through this blog - http://bensullins.com/finding-tableau-server-user-permissions/

           

          tableau-hacks/view-permissions.sql at master · bsullins/tableau-hacks · GitHub

           

          Toby or one of the other admins might have a better solution.

           

          Thank you,

          Jegan

          • 2. Re: Custom Admin Views
            Arun Yadav

            Hi Jegan,

             

            Many thanks for your reply.This sql does not give us information about a scenario like where we want to know a particular user group has access to which all projects & workbooks.

             

            @Toby Erkson,

            Can you please help me out here,if you can.

             

            Many thanks in advance.

             

            Regards,

            Arun

            • 3. Re: Custom Admin Views
              Arun Yadav

              Hi All,

               

              Does anyone has any solution for this problem.

              I got some other custom views from our Tableau Community but those does not have any view related to groups and their related workbooks.

               

              In my project, a user asked me to check that his groups has access to which workbooks and this seems to be valid question but still there is no way to find it out,as far as I know.

               

              If anyone can provide me pointers in this direction,will be highly appreciated.

               

              Regards,

              Arun

              • 4. Re: Custom Admin Views
                Toby Erkson

                These last couple of weeks I've been trying to work on finding out what Groups are being used for permissions in Projects.  People permissions would be nice as a secondary metric.  If only my end users would leave me alone

                 

                From what I've been working with this is not as simple as one would think given the data structure in the Tableau Server db.  I have nothing to contribute right now nor an ETA.  I think we need a Server expert, someone on the "inside" to help out here.

                 

                Arun, would you mind giving your post a different subject title, something more descriptive of what you're looking for?  For example, "Get list of Groups that have access to a Project/Workbook" or "Reporting Project/Workbook permissions", etc.  Something that will attract the interest of certain people I'm thinking of...

                • 5. Re: Workbooks that a group has access to
                  Arun Yadav

                  Thanks a lot Toby for your inputs.Do you know any server expert who can give any input on this view ?

                  As you mentioned rightly,I have changed the title of this post to a more relevant one.

                  • 6. Re: Workbooks that a group has access to
                    Toby Erkson

                    These are the only ones I can think of who've helped me in the past:

                    Russell Christopher, Matt Coles, John Kuo, Vien Hua, Dan Cory

                     

                    And just for fun because I miss him and he knows people:  Dustin Smith

                    • 7. Re: Workbooks that a group has access to
                      David Mannering

                      This SQL should give you the data you need to display permissions by project, workbook or view.  It may be a bit of overkill for what you need, though. (and comes with no warranty .

                       

                       

                      -- version 9.0

                       

                      -- unions the next_gen_permissions table with itself to get the six combinations of permissions:

                      -- project group, project user, workbook group, workbook user, view group, and view user

                      -- the joins are required to get names and the relationships between project/workbook and view

                       

                      SELECT * FROM

                       

                      (SELECT

                       

                      1. N.authorizable_type,N.authorizable_id,N.grantee_id,N.grantee_type,N.capability_id,N.permission,
                      2. U.friendly_name as grantee_name,
                      3. P.name as authorizable_name,
                      4. P.name as project,'.' as workbook,'.' as view

                       

                      FROM next_gen_permissions N

                      LEFT JOIN _users U on N.grantee_id = U.id

                      LEFT JOIN projects P on N.authorizable_id = P.id

                       

                      WHERE N.grantee_type = 'User' AND N.authorizable_type = 'Project'

                       

                      UNION

                       

                      SELECT

                      1. N.authorizable_type,N.authorizable_id,N.grantee_id,N.grantee_type,N.capability_id,N.permission,
                      2. G.name as grantee_name,
                      3. P.name as authorizable_name,
                      4. P.name as project,'.' as workbook,'.' as view

                       

                      FROM next_gen_permissions N

                      LEFT JOIN groups G on N.grantee_id = G.id

                      LEFT JOIN projects P on N.authorizable_id = P.id

                       

                      WHERE N.grantee_type = 'Group' AND N.authorizable_type = 'Project'

                       

                      UNION

                       

                      SELECT

                      1. N.authorizable_type,N.authorizable_id,N.grantee_id,N.grantee_type,N.capability_id,N.permission,
                      2. G.name as grantee_name,
                      3. W.name as authorizable_name,
                      4. P.name as project,W.name as workbook,'.' as view

                       

                      FROM next_gen_permissions N

                      LEFT JOIN groups G on N.grantee_id = G.id

                      LEFT JOIN workbooks W on N.authorizable_id = W.id

                      LEFT JOIN projects P on W.project_id = P.id

                       

                      WHERE N.grantee_type = 'Group' AND N.authorizable_type = 'Workbook'

                       

                      UNION

                       

                      SELECT

                      1. N.authorizable_type,N.authorizable_id,N.grantee_id,N.grantee_type,N.capability_id,N.permission,
                      2. U.friendly_name as grantee_name,
                      3. W.name as authorizable_name,
                      4. P.name as project,W.name as workbook,'.' as view

                       

                      FROM next_gen_permissions N

                      LEFT JOIN _users U on N.grantee_id = U.id

                      LEFT JOIN workbooks W on N.authorizable_id = W.id

                      LEFT JOIN projects P on W.project_id = P.id

                       

                      WHERE N.grantee_type = 'User' AND N.authorizable_type = 'Workbook'

                       

                      UNION

                       

                      SELECT

                      1. N.authorizable_type,N.authorizable_id,N.grantee_id,N.grantee_type,N.capability_id,N.permission,
                      2. G.name as grantee_name,
                      3. V.name as authorizable_name,
                      4. P.name as project,W.name as workbook,V.name as view

                       

                      FROM next_gen_permissions N

                      LEFT JOIN groups G on N.grantee_id = G.id

                      LEFT JOIN views V on N.authorizable_id = V.id

                      LEFT JOIN workbooks W on V.workbook_id = W.id

                      LEFT JOIN projects P on W.project_id = P.id

                       

                      WHERE N.grantee_type = 'Group' AND N.authorizable_type = 'View'

                       

                      UNION

                       

                      SELECT

                      1. N.authorizable_type,N.authorizable_id,N.grantee_id,N.grantee_type,N.capability_id,N.permission,
                      2. U.friendly_name as grantee_name,
                      3. V.name as authorizable_name,
                      4. P.name as project,W.name as workbook,V.name as view

                       

                      FROM next_gen_permissions N

                      LEFT JOIN _users U on N.grantee_id = U.id

                      LEFT JOIN views V on N.authorizable_id = V.id

                      LEFT JOIN workbooks W on V.workbook_id = W.id

                      LEFT JOIN projects P on W.project_id = P.id

                       

                      WHERE N.grantee_type = 'User' AND N.authorizable_type = 'Workbook'

                       

                        ) X

                       

                      LEFT JOIN capabilities C on X.capability_id = C.id

                      4 of 4 people found this helpful
                      • 8. Re: Workbooks that a group has access to
                        Arun Yadav

                        Many thanks David.

                         

                        I will try to implement this and let's see what's the outcome.

                        • 9. Re: Workbooks that a group has access to
                          Toby Erkson

                          David,

                          Wow, thank you so much!  A while back someone had given me a workbook with permissioning that works really great but requires extracts due to the enormous size of the data and load on the Server.  While this doesn't provide the rich data it does provide essential data that's good enough and much more quickly!

                           

                          I've taken the code, added some additional [borrowed] code to it for getting System and Site Administrator indicators, and wrapped it up nicely into a workbook with a basic viz ready to go (v9.1)

                           

                          Everyone, make sure you edit the data connection for your specific Tableau Server.

                          5 of 5 people found this helpful
                          • 10. Re: Workbooks that a group has access to
                            John Kuo

                            Great work, Toby! Can you post the same message to the Custom Admin View Group? Custom Admin Views

                             

                            Thanks!

                             

                            John

                            • 11. Re: Workbooks that a group has access to
                              Toby Erkson

                              Getting permission settings from the Tableau Server

                              Glad to help out a little.  This is something I've been working towards, on and off, and not really being successful   Thanks to David for his HUGE assist that made all the difference and made this possible

                               

                              Edit:  Above link updated.

                              • 12. Re: Workbooks that a group has access to
                                John Kuo

                                So I just found out in v9.2 there's a similar built-in permissions auditing view.

                                 

                                Click on the three little dots (top right corner) on a view > permissions:

                                 

                                1-25-2016 4-22-49 PM.jpg

                                 

                                Click on the group name on the next screen to see a list of user permissions:

                                 

                                1-25-2016 4-23-33 PM.jpg

                                 

                                 

                                Cheers,

                                 

                                John

                                3 of 3 people found this helpful
                                • 13. Re: Workbooks that a group has access to
                                  Toby Erkson

                                  Arun Yadav, did my answer work for you?

                                  • 14. Re: Workbooks that a group has access to
                                    David Brown

                                    Really cool dashboard Toby!  Thank you for sharing.

                                    1 2 Previous Next